Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Lisbon

Region: Lisbon

Country: Portugal

Internet Service Provider: PT Comunicacoes S.A.

Hostname: unknown

Organization: Servicos De Comunicacoes E Multimedia S.A.

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspambots
Invalid user debian from 85.245.19.114 port 49646
2019-06-30 09:12:52
attackspambots
Jun 23 11:47:57 mail sshd\[1240\]: Invalid user ubuntu from 85.245.19.114 port 34162
Jun 23 11:47:57 mail sshd\[1240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.19.114
Jun 23 11:47:59 mail sshd\[1240\]: Failed password for invalid user ubuntu from 85.245.19.114 port 34162 ssh2
Jun 23 11:49:16 mail sshd\[1519\]: Invalid user beheerder from 85.245.19.114 port 48552
Jun 23 11:49:16 mail sshd\[1519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.245.19.114
2019-06-24 00:45:23
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 85.245.19.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55831
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;85.245.19.114.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062300 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jun 24 00:45:08 CST 2019
;; MSG SIZE  rcvd: 117
Host info
114.19.245.85.in-addr.arpa domain name pointer bl12-19-114.dsl.telepac.pt.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
114.19.245.85.in-addr.arpa	name = bl12-19-114.dsl.telepac.pt.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
92.246.84.185 attack
[2020-05-15 15:02:16] NOTICE[1157][C-00005046] chan_sip.c: Call from '' (92.246.84.185:59835) to extension '50001146406820583' rejected because extension not found in context 'public'.
[2020-05-15 15:02:16] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-15T15:02:16.861-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="50001146406820583",SessionID="0x7f5f100266a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.185/59835",ACLName="no_extension_match"
[2020-05-15 15:03:56] NOTICE[1157] chan_sip.c: Registration from '' failed for '92.246.84.185:49892' - Wrong password
[2020-05-15 15:03:56] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-15T15:03:56.290-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8989",SessionID="0x7f5f10b1c8b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/92.246.84.185/49892",Challenge="24d9e
...
2020-05-16 04:22:23
69.174.91.32 attackbotsspam
fell into ViewStateTrap:paris
2020-05-16 04:22:01
69.174.91.42 attack
fell into ViewStateTrap:madrid
2020-05-16 04:21:42
119.160.149.220 attackspam
"Account brute force using dictionary attack against Exchange Online"
2020-05-16 04:18:47
121.173.126.110 attackbotsspam
Telnet Server BruteForce Attack
2020-05-16 04:00:53
167.99.48.123 attack
Brute-force attempt banned
2020-05-16 04:15:44
210.140.172.181 attack
Invalid user servis from 210.140.172.181 port 59579
2020-05-16 04:01:27
106.52.181.236 attack
Brute force attempt
2020-05-16 04:38:21
162.243.136.218 attack
Unauthorized connection attempt detected from IP address 162.243.136.218 to port 9200 [T]
2020-05-16 04:20:41
183.3.255.186 attackbots
Fail2Ban Ban Triggered
SMTP Bruteforce Attempt
2020-05-16 04:37:24
5.58.119.125 attack
Automatic report - Banned IP Access
2020-05-16 04:02:32
80.211.60.125 attackbots
May 15 15:07:43 ws22vmsma01 sshd[230105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.60.125
May 15 15:07:45 ws22vmsma01 sshd[230105]: Failed password for invalid user nftp from 80.211.60.125 port 33014 ssh2
...
2020-05-16 04:19:30
51.91.56.133 attackbots
May 15 16:39:41 ift sshd\[37742\]: Failed password for root from 51.91.56.133 port 51152 ssh2May 15 16:43:01 ift sshd\[38313\]: Invalid user user from 51.91.56.133May 15 16:43:03 ift sshd\[38313\]: Failed password for invalid user user from 51.91.56.133 port 58994 ssh2May 15 16:46:30 ift sshd\[38924\]: Invalid user asuka from 51.91.56.133May 15 16:46:32 ift sshd\[38924\]: Failed password for invalid user asuka from 51.91.56.133 port 38606 ssh2
...
2020-05-16 04:23:29
156.96.58.106 attackbots
[2020-05-15 15:53:20] NOTICE[1157][C-0000507b] chan_sip.c: Call from '' (156.96.58.106:59617) to extension '92792441519470725' rejected because extension not found in context 'public'.
[2020-05-15 15:53:20] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-15T15:53:20.594-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="92792441519470725",SessionID="0x7f5f102df088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.58.106/59617",ACLName="no_extension_match"
[2020-05-15 15:55:22] NOTICE[1157][C-0000507c] chan_sip.c: Call from '' (156.96.58.106:58053) to extension '92793441519470725' rejected because extension not found in context 'public'.
[2020-05-15 15:55:22] SECURITY[1173] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-15T15:55:22.730-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="92793441519470725",SessionID="0x7f5f10b1c8b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="I
...
2020-05-16 04:02:58
164.132.159.49 attackspambots
Hits on port : 1189
2020-05-16 04:28:13

Recently Reported IPs

177.21.130.79 218.66.182.235 214.17.96.145 149.33.139.159
100.236.218.118 203.12.175.239 116.203.68.175 185.128.33.185
39.61.213.220 106.75.2.81 36.103.191.208 12.209.157.12
86.221.128.208 95.173.215.141 108.78.166.230 77.148.128.222
52.239.82.62 89.205.130.101 116.132.4.180 60.32.164.244